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Abstract. I present a construction of permutation polynomials 
based on cyclotomy, an additive analogue of this construction, and 
a generalization of this additive analogue which appears to have 
no multiplicative analogue. These constructions generalize recent 
results of Jose Marcos. 

Dedicated to Mel Nathanson on the occasion of his sixtieth birthday 

1. Introduction 

Writing ¥q for the field with q elements, we consider permutation 
polynomials over F^, namely polynomials / G ¥q[x] for which the map 
a I— > /(a) induces a permutation of F,. These polynomials first arose 
in work of Betti [6], Mathieu [28], and Hermite [20], as a tool for 
representing and studying permutations. 

Since every mapping F^ ¥q is induced by a polynomial, the study 
of permutation polynomials focuses on polynomials with unusual prop- 
erties beyond inducing a permutation. In particular, permutation poly- 
nomials of 'nice' shapes have been a topic of interest since the work of 
Hermite, in which he noted that there are many permutation polyno- 
mials of the form 

/(x) := ax\x^ + 1) ^ bx\x^ — 1) 

with q odd, i,j > 0, and a, 6 G F*. The reason for this is that /(a) = 
2aa* if a G Fq is a square, and /(a) = 2ba^ otherwise; thus, for 
instance, / is a permutation polynomial if 2a and 26 are squares and 
gcd(zj, g - 1) = 1. 

More generally, any polynomial of the form f(x) := x'^h{x^'^~^^^'^) 
induces a mapping on Fg modulo ci-th powers, so testing whether / 
permutes ¥g reduces to testing whether the induced mapping on cosets 
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is bijective (assuming that / is injective on each coset, or equivalently 
that gcd(r, (g — l)/d) = 1). The vast majority of known examples 
of 'nice' permutation polynomials have this 'cyclotomic' form for some 
d < q — 1; see for instance [1-5, 7, 9-25, 29-34, 36-43]. Moreover, there 
is a much longer list of papers proving nonexistence of permutation 
polynomials of certain shapes, and nearly all such papers again address 
these polynomials f{x) having cyclotomic behavior. 

In the recent preprint Marcos gives five constructions of per- 
mutation polynomials. His first two constructions are new classes of 
permutation polynomials having the above cyclotomic form. His third 
construction is a kind of additive analogue of the first, resulting in poly- 
nomials of the form L{x) + h(T(x)) where T{x) := x'^^'^+x'^^'^ +■ ■ ■+x is 
the trace polynomial from ¥q to its prime field Fp, and L{x) = o-iX^' 
is any additive polynomial. The idea of the analogy is that T{x) in- 
duces a homomorphism ¥g ¥p, just as x*^''"^-*/'^ induces a homo- 
morphism from ¥* to its subgroup of d-th roots of unity. The fourth 
construction in [2S] is a variant of the third for polynomials of the form 
L{x) + h{T{x)){L{x) + c), and the fifth construction replaces T{x) with 
other symmetric functions in x'^^^, x'^^^ , . . . , x. 

In this paper I present rather more general versions of the first four 
constructions from [26], together with simplified proofs. I can say noth- 
ing new about the fifth construction from [26], although that construc- 
tion is quite interesting and I encourage the interested reader to look 
into it. 

2. Permutation polynomials from cyclotomy 

In this section we prove the following result, where for d > 1 we 
write hd{x) := x'^~^ + + ■ ■ ■ + x + 1. 

Theorem 1. Fix a divisor d > 2 of q — 1, integers u > 1 and k > 0, 
an element 6 G F^, and a polynomial g G ¥q[x\ divisible by hd- Then 



permutes ¥q if and only if the following four conditions hold: 



fix) := x" (fex'^^"-^)/'^ + g{x 





The proof uses the following simple lemma. 
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Lemma 2. Fix a divisor d ofq — 1, an integer u > 0, and a polynomial 
h e ¥g[x]. Then f{x) := x'^h^x^'^^^^^'^) permutes if and only if the 
following two conditions hold: 

(1) gcd{u,{q-l)/d) = l, 

(2) f{x) := x'^h(x)^'^~^^^'^ permutes the set fXd ofd-th roots of unity in ¥*. 

I discovered this lemma in 1997 when writing [35], and used it in 
seminars and private correspondence, but I did not pubhsh it until 
recently [l2l Lemma 2.1]. For other applications of this lemma, see 

Proof of Theorem\^ In light of the lemma, we just need to determine 
when f{x) permutes /x^, where 

f{x) := x'^ihx^ + g{x)f'i-^^/'^. 

For C e ^ld\{l} we have c/(C) = 0, so /(C) = Thus, / 

is injective on /irf\{l} if and only if 6 7^ and gcd((i, u + k{q~l) / d) = 1. 
When these conditions hold, /(/irf\{l}) = fi(i\{b^'^^^^^^}, so / permutes 
/irfifandonlyif /(I) = Since /(I) = (6+^(l))(5-i)/^ the latter 

condition is equivalent to (1 + g(l) /bY'^~^^^'^ = 1, as desired. □ 

The case g = hd oi Theorem [1] is [261 Thm. 2], and [26l Prop. 4] is 
the case that g = — x^ — x^ and d = u = k — 2 = 5. 

Remark. The key feature of the polynomials in Theorem [1] as a par- 
ticular case of Lemma [2] is that the induced mapping / on /x^ \ {1} is 
a monomial, and we know when monomials permute /i^. For certain 
values of d, we know other permutations of fid- for instance, if g = 
and d = ^Jq^ — 1 then = F*^, so we can obtain permutation poly- 
nomials over Fq by applying Lemma [2] to polynomials f{x) for which 

the induced map / on F*^ is any prescribed permutation polynomial. 
This construction already yields interesting permutation polynomials 
of Fg coming from degree-3 permutation polynomials of F^^; see [35] 
for details and related results. 

3. Permutation polynomials from additive cyclotomy 

Lemma [2] addresses maps F^ — > Fg which respect the partition of 
F* into cosets modulo a certain subgroup. In this section we give an 
analogous result in terms of cosets of the additive group of F^ modulo 
a subgroup. Let p be the characteristic of Fg. An additive polynomial 
over ¥q is a polynomial of the form X]f=o '^i^;^' with G Fg. The key 
property of additive polynomials A{x) is that they induce homomor- 
phisms on the additive group of Fg, since A{a + /?) = A{a) + A{[3) 
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for G Fq. The additive analogue of Lemma [2] is as follows, where 
we write imB and keri? for the image and kernel of the mapping 

Proposition 3. Pick additive A,B E Fq[a;] and an arbitrary g G Fg[a;]. 
Then f{x) := A{x) + g{B{x)) permutes ¥q if and only if A(keT B) + 
f{imB) = ¥q, where f{x) := g{x) + A{B{x)) and B G ¥q[x] is any 
polynomial for which B{B{x)) is the identity on imi?. In other words, 
f permutes Fg if and only iff induces a bijectionimB — >■ ¥q/A{keTB), 
where ¥q/A(keY B) is the quotient of the additive group of ¥q by the 
subgroup A{keTB). 

Proof For /5 G kerS we have f{x + (3) = A{x) + A{f3) + g{B{x)) = 
f{x)+A{P). Thus, for a G Fg wehave /(a + ker5) = /(a) + A(ker 5). 
Since Fg = kerS + B{imB), it follows that /(Fg) = f{B{imB)) + 
AikeiB). Since f{B{j)) = A{B{^)) + g{B{B{^))) = A{B{^)) + g{^) 
for 7 G imB, the result follows. □ 

Corollary 4. // / permutes Fg then A is injective on ker B and f is 
infective on imi?. 

Proof. If AikeiB) + /(im5) = Fg then 

q < #A(ker5) ■ #/(imfi) < #(kerB) ■ #(im5) = g, 

where the last equality holds because B defines a homomorphism on 
the additive group of Fg. The result follows. □ 

Corollary 5. Suppose A{B{a)) = B{A{a)) for all a G Fg. Then 
f permutes Fg if and only if A permutes ker B and A{x) + B{g{x)) 
permutes imB. 

Proof. Since A and B commute, and A{0) = 0, it follows that A(ker B) C 
ker 5. Thus, by the previous corollary, if / permutes Fg then A per- 
mutes ker B. Henceforth assume that A permutes ker B. By the propo- 
sition, / permutes Fg if and only if keri? + f{imB) = Fg; since the 
left side is the preimage under B of B{f{imB)), this condition may 
be restated as B{f{imB)) = imB. For 7 G imi? we have B{f {'-))) = 
B{g{^)) + 5(A(S(7))) = B{g{^)) + A{B{B{^))) = B{g{^)) + ^(7), 
so B{f{x)) permutes imi? if and only if B{g{x)) + A{x) permutes 
imB. □ 

One way to get explicit examples satisfying the conditions of this 
result is as follows: ii B = x"^^ + x'^^^ + ■ ■ ■ + x^ + x and A G Fp[a;], 
then A{B{x)) = B{A{x)), so / permutes Fg if and only if A permutes 
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ker B and A{x) +B{g{x)) permutes imB = ¥p. In case g is a constant 
(in Fq) times a polynomial over ¥p, this becomes (a slight generalization 
of) [26l Thm. 6]. The following case of [26;, Cor. 8] exhibits this. 

Example. In case q = and B = x^ + x and A = x, the previous 
corollary says f{x) := x+g{x^+x) permutes ¥p2 if and only ii x+g{xy+ 
g{x) permutes ¥p, which trivially holds when g = 7/i(x) with h G ¥p[x] 
and 7^"^ = —1. For instance, taking h{x) = x"^, it follows that x + 
jIx^+x^ permutes ¥p2. By using other choices of h, we can make many 
permutation polynomials over ¥p2 whose degree is a small multiple 
of p. This is of interest because heuristics suggest that 'at random' 
there would be no permutation polynomials over of degree less than 
q/ (2 logg). The bulk of the known low-degree permutation polynomials 
are exceptional, in the sense that they permute F^fc for infinitely many k; 
a great deal is known about these exceptional polynomials, for instance 
see [IS] . It is known that any permutation polynomial of degree at most 
g^/^ is exceptional. However, the examples described above have degree 
on the order of g^^^ and are generally not exceptional. 

Our final result generalizes the above example in a different direction 
than Proposition [31 

Theorem 6. Pick any g G Fg[x], any additive A G Fp[x], and any 
h G Fp[a;]. For B := x"^^^ + + ■ ■ ■ + x^ + x, the polynomial f{x) : = 
g{B{x)) + h{B{x))A{x) permutes ¥q if and only if A permutes ker B 
and B{g{x)) + h{x)A{x) permutes ¥p and h has no roots in ¥p. 

Proof For (3 ekeiB we have f{x + (3) = f{x) + h{B{x))A{(3). Thus, 
if / permutes ¥q then A is injective on keri? and h has no roots in 
¥p. Since A{B{x)) = B{A{x)) and A{0) = 0, also A{ker B) C keiB, 
so if / permutes ¥q then A permutes ker 5. Henceforth assume A 
permutes ker B and h has no roots in ¥p. Since im i? = Fp and h{¥p) C 
¥p \ {0}, we have h{B{a)) G Fp \ {0} for a G F^. Thus, for a G F^ 
we have f{a + ker i?) = f{a) + ker 5, so / permutes Fg if and only if 
B{f{¥q)) = imB. Now for a G F^ we have B{f{a)) = B{g{B{a))) + 
B{h{B{a))A{a)), and since h{B{a)) G Fp this becomes B{f{a)) = 
B{g{B{a))) + h{B{a))B{A{a)) = B{g{B{a)) + h{B{a))A{B{a)), so 
B{f(¥q)) is the image of imi? under B{g{x)) + h{x)A{x). The result 
follows. □ 

In case g = jh + 6 with 7, 5 G F^, the above result becomes a gen- 
eralization of [26^, Thm. 10]. In view of the analogy between Lemma [2] 
and Proposition [3l it is natural to seek a 'multiplicative' analogue of 
Theorem [61 However, I have been unable to find such a result: the 
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obstacle is that the polynomial / in Theorem [6] is the sum of products 
of polynomials, which apparently should correspond to a product of 
powers of polynomials, but the latter is already included in Lemma [2l 
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